Security Analyst

Overview

Support and independently drive day-to-day vulnerability management activities, coordinating remediation with infrastructure, application, cloud and security teams to improve the overall vulnerability management program.

What you'll do

• Perform vulnerability assessment reviews using Qualys, Nessus, or equivalent vulnerability management platforms.
• Analyze vulnerability scan results and validate findings to identify true risk and remediation priorities.
• Coordinate with infrastructure, application, cloud, and endpoint teams to drive remediation within defined SLAs.
• Track remediation progress and follow up with asset owners until vulnerabilities are resolved.
• Review vulnerabilities using CVSS scoring, exploitability, business criticality, and threat intelligence to support risk-based prioritization.
• Monitor patch compliance and remediation effectiveness across Windows, Linux, network, and cloud assets.
• Prepare operational dashboards, reports, and executive summaries for management.
• Maintain accurate documentation of vulnerability findings, remediation activities, exceptions, and risk acceptances.
• Support onboarding, testing, and operationalization of new vulnerability management and security tools.
• Identify opportunities to improve processes, workflows, reporting, and automation.
• Work independently to organize daily team activities and help improve operational efficiency.
• Collaborate with Security Operations, Incident Response, Cloud Security, Infrastructure, and Application teams on vulnerability-related investigations.
• Participate in vulnerability review meetings and communicate technical findings to both technical and non-technical stakeholders.

What you'll need

• 2–3 years of experience in Vulnerability Management, Security Operations, or Cybersecurity.
• Good understanding of vulnerabilities, CVEs, CVSS scoring, and risk prioritization.
• Hands-on experience with vulnerability scanning tools such as Qualys, Nessus, or Tenable.
• Good understanding of Windows Server, Linux, networking fundamentals, and servers and endpoints.
• Understanding of patch management lifecycle and remediation tracking.
• Knowledge of IT infrastructure and asset management.
• Good understanding of OWASP Top 10, including SQL Injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), Broken Access Control, Authentication & Authorization issues, Security Misconfiguration, Vulnerable Components, and Server-Side Request Forgery (SSRF).
• Experience working with ServiceNow or similar ticketing platforms.
• Good analytical and troubleshooting skills.
• Ability to work independently with minimal supervision.
• Excellent verbal and written communication skills.
• Strong stakeholder management and coordination skills.
• Ability to independently lead remediation discussions with technical teams.
• Good organizational and planning skills.
• Ability to manage multiple priorities and meet deadlines.
• Project coordination skills with the ability to support new security tool onboarding and process improvements.
• Self-driven with a continuous improvement mindset.
• Comfortable mentoring junior analysts and sharing knowledge within the team.

Details

• Location: Hyderabad.